JBrowser 1.0/2.x - 'browser.php' Directory Traversal
| EKU-ID: 29053 | CVE: CVE-2004-2750;OSVDB-39840 | OSVDB-ID: |
| Author: Himeur Nourredine | Published: 2004-01-30 | Verified:
 |
| Download: | ||
Rating☆☆☆☆☆ |
| EKU-ID: 29053 | CVE: CVE-2004-2750;OSVDB-39840 | OSVDB-ID: |
| Author: Himeur Nourredine | Published: 2004-01-30 | Verified:
|
| Download: | ||
Rating☆☆☆☆☆ |
source: https://www.securityfocus.com/bid/9535/info JBrowser has been reported to be vulnerable to directory traversal vulnerability that may allow a remote attacker to gain access to files readable by the web-server that reside outside of the server root directory. This issue is caused by insufficient sanitization of user specified directory paramemters issued to the 'browser.php' script. http://www.example.org/browser.php?directory=[ATTACKER_SPECIFIED_PATH]